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"To the amendment, p. 2, line 15 thereof, after "functions" delete the period and insert-, while in 
the former, in a second stage, symmetric encryption can be used to encrypt the intermediate 
message digest or private key signature value arrived at using the preferred embodiment.—" 




Claims: Applicant requests cancellation of claims 56-75 and substitution of new claims 76-78 as 
follows: 

76. A method for signing and verifying electronic data at a server comprising: 

an authentication step of creating a collection of records about a plurality of 
individuals by entering into a data storage medium a collection of any or a 
Spmbination of any of the following: 

personal information about an individual, 

an indicator of the reliability of the identification of the individual who is 
tte subject of a record, 

iii. whether the authentiratio^roode is universal or whether such individual 
must Whenticate4e-tfie seWr computer in order to sign electronic data 
using thW server computer, and 

iv. the authentication credential or plurality of authentication credentials that 
such individual must present to the server in order to sign; 

b. an access control step of\ 

i. receiving a request to^ign and, unless the authentication mode is 

universa l , an authent i c a fipn c r ede n tia l o r a p l u r al it y of authentication 



credentials from a requestor, and 



ii. comparing the authentication credential or credentials to the information 
contained in the collection of records to determine if the requestor is an 
individual who is authorized to sign electronic data using the server; 



c. a presentation step of providing to the server an electronic data set for signature; 
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a transaction identifier step of generating at the server a globally unique 
transaction identifier for the electronic data that a requestor intends to sign, which 
includes as one input an identifier associated with the requestor's identity; 



e. a signature step whereby the server encrypts, as the signature of a signer, each 
electronic data set with a unique encryption key, generated from a symmetric 
cipher\jsing the globally unique transaction identifier as the character input of a 
passwora for generation of the key; 



f. a recording step in which the server generates and stores in a data storage 
medium a record of a signature transac 



g. a verification step whereby 




i. an inquiring party seeking to verify the validity of a signature of electronic 
data transmits to a server electronic data that is believed to have been 

previously signed at a server; 

ii. the server determines if a record or a plurality of records corresponding to 
the transmitted electronic dkta exists in the data storage medium of such 
records; 



hi. the server retrieves a record or plurality of records corresponding to the 
electronic data which is presented for verification; 

iv. with regard to each such record, the server performs a verification 

operation which includes a step of reconstructing a symmetric cipher from 

a record of injiut for a password of a key that was used to create an 

\ 

encryption key initially, including an identifier ^ the signer, and applying 
such symmetric cipher to decrypt an electronic c^ata set; 
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